NFS access from WAN

[cronner]

I can't seem to access my NFS share from WAN

Tried opening port 111 and 2049 TCP/UDP but no luck.

It works within the LAN

Any ideas?

 

[torleif]

If I am not mistaken, I think you need vpn access for that.
The NFS share is set in the export file to allow a specific lan address.

 

[cronner]

I type in the allowed ip, even tried * for all ip's
exports looks just fine

 

[RMerlin]

NFS sharing is only from within your LAN.

Exposing NFS sharing over the Internet is a bad idea, even worse than SMB, because it has no notion of authentication. All is access are controlled merely on an IP basis, which can probably easily be worked around.

 

[cronner]

too bad needed for backup, is there a way to do ftp with Encryption?

 

[RMerlin]

too bad needed for backup, is there a way to do ftp with Encryption?

SFTP is possible, but requires manual configuration (octupus posted something on how to get it to work last year, search the forums for it).

Another simpler (IMHO) solution is SCP. All you'd need would be to enable SSH (possibly move it to a non-standard port, or at least enable the brute force detection feature). If you use key-based authentication you will get a very secure setup. If the remote machine runs Linux, then you can easily use "scp" in a script.

 

[cronner]

need something like NFS or mounting a sftp/ftps for proxmox to do automatic offsite backup

vsftpd has "ssl_enable=NO" maybe that's possible with manual config?
http://www.snbforums.com/threads/merlin-firmware-anyway-to-encrypt-ftp.21317/#post-154317

 

[RMerlin]

need something like NFS or mounting a sftp/ftps for proxmox to do automatic offsite backup

vsftpd has "ssl_enable=NO" maybe that's possible with manual config?
http://www.snbforums.com/threads/merlin-firmware-anyway-to-encrypt-ftp.21317/#post-154317

Here's the thread I was talking about:

http://www.snbforums.com/threads/vsftpd-support-ssl-tls-encryption-support.17939/

Check the instructions in post 17.